CVE-2024-43645

CVE-2024-43645 is a Windows Defender Application Control (WDAC) security feature bypass described in connected advisories. The vulnerability permits bypassing WDAC protections via a local attacker, with high potential impact to confidentiality, integrity, and availability. Microsoft has published...

CVE-2026-65787

The CVE-2026-65787 entry describes a heap-based buffer overflow in Desktop Window Manager that allows an authorized attacker to elevate privileges locally. Documented impact is local privilege escalation with a high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability affec...

CVE-2016-7221

CVE-2016-7221 is a Windows IME DLL-loading privilege-escalation issue. The IME loads DLLs via a registry-controlled mechanism and can be exploited by a locally authenticated user to gain higher privileges when an application initiates the IME. Public writeups (e.g., JVN/JVND) describe the exploit...

CVE-2016-7292

CVE-2016-7292 is a Windows Installer Elevation of Privilege vulnerability. The NVD description notes that the Installer in multiple Windows editions mishandles library loading, allowing a local attacker to gain higher privileges via a crafted application. Affected platforms include Windows Vista ...

CVE-2017-8477

CVE-2017-8477 : A local information-disclosure vulnerability in Windows kernel objects during memory initialization (Win32k). Affected: multiple Windows versions including Windows 7 SP1, Windows 8.1, Windows 10 variants (1511, 1607, 1703) and Windows Server equivalents. Impact: potential informat...

CVE-2017-8479

Technical details for CVE-2017-8479 are not publicly available in the provided documents. Monitor for updates from official advisories and CVE records.

CVE-2017-8579

CVE-2017-8579 describes a kernel-mode privilege escalation via the DirectX component in Windows 10 (Gold/1511, 1607, 1703) and Windows Server 2016. An authenticated, local attacker can run arbitrary code in kernel mode through a specially crafted DirectX application. The impact is full system com...

CVE-2017-8581

CVE-2017-8581 is a Win32k elevation of privilege vulnerability affecting multiple Windows platforms (Windows 7/8.1/10 and corresponding Server editions) where improper handling of objects in memory could allow an attacker to run code with elevated privileges. The provided documents identify the a...

CVE-2017-8590

CVE-2017-8590 is the Windows CLFS Elevation of Privilege vulnerability where the Common Log File System driver mishandles objects in memory, enabling local privilege elevation on affected Windows versions (Win7 SP1, Server 2008 SP2/R2 SP1, Win8.1/RT8.1, Server 2012/R2, Win10 1511/1607/1703, Serve...

CVE-2017-8677

CVE-2017-8677 is a Win32k/GDI+-related information-disclosure vulnerability in Windows that exposes kernel memory addresses when handling GDI+ objects. Affected products include Windows kernel/UI components on Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows 10 (various builds)...

CVE-2018-8441

CVE-2018-8441 is an elevation-of-privilege flaw in Windows Subsystem for Linux caused by an integer overflow. A locally authenticated attacker could exploit a crafted WSL object in memory to execute code with elevated privileges on affected Windows 10/Windows Server systems. Public advisories (MS...

CVE-2019-0886

The CVE-2019-0886 entry concerns a vulnerability in Windows Hyper‑V where the host OS fails to properly validate input from a guest OS, potentially allowing information disclosure by an authenticated guest user. Public connected documents corroborate that the affected component is Windows Hyper‑V...

CVE-2019-1216

CVE-2019-1216 describes a DirectX information disclosure vulnerability arising from improper handling of memory objects in DirectX. The issue affects Microsoft Windows/Windows Server environments via DirectX components and is characterized by a memory handling flaw that allows partial confidentia...

CVE-2020-0659

CVE-2020-0659 is a Windows elevation-of-privilege vulnerability in the Windows Data Sharing Service, arising when the service improperly handles file operations. The issue enables local attackers to escalate privileges (CVE-2020-0659 is distinct from CVE-2020-0747). The NVD entry indicates a MEDI...

CVE-2020-0682

Technical details about CVE-2020-0682 are not publicly provided in the supplied documents. No concrete affected product/version or remediation info is available here. Monitor for updates from official advisories.

CVE-2020-0745

CVE-2020-0745 is a Windows Graphics Component elevation-of-privilege vulnerability caused by improper handling of memory objects. The entry (CVE-2020-0745) indicates a local attack vector requiring low privileges and no user interaction (CVSS v3.1: Local, Low, None, Privilege Escalation with High...

CVE-2020-0756

Technical details for CVE-2020-0756 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2020-0774

CVE-2020-0774 is a Windows GDI information-disclosure vulnerability. The Windows GDI component improperly handles memory objects, allowing an attacker to leak memory contents and potentially information needed for further compromise. The vulnerability can be exploited via social engineering (e.g....

CVE-2020-0845

Technical details for CVE-2020-0845 are not publicly available in the provided documents; monitor for updates.

CVE-2020-0853

CVE-2020-0853 is a Windows Imaging Component information-disclosure vulnerability rooted in uninitialized memory in Windows image decoders. FireEye’s analysis shows uninitialized memory in windowscodecs!CFormatConverter::Initialize led to leaking pixel data during TIFF/image decoding; PoC output ...

CVE-2020-0998

CVE-2020-0998 is an elevation of privilege in the Windows Graphics Component caused by improper in-memory object handling; exploitable via a crafted local application to gain elevation. Microsoft patch addresses the memory handling to prevent unintended user-mode elevation.

CVE-2020-1126

The CVE-2020-1126 entry relates to a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The affected component is Windows Media Foundation within Windows; the root cause is object handling in memory leading to corruption. Severity metrics...

CVE-2020-1154

CVE-2020-1154 : Elevation of privilege in the Windows Common Log File System (CLFS) Driver due to improper handling of objects in memory. The vulnerability enables local privilege escalation, with a high-severity impact (CONFIDENTIALITY/INTEGRITY/AVAILABILITY listed as HIGH in CVSS 3.1, and LOCAL...

CVE-2020-1277

The CVE-2020-1277 entry relates to an elevation of privilege in Windows Installer. Connected CNVD entries describe the flaw as arising from how Windows Installer handles certain file system operations (some variants mention improper handling/cleanup of input) which can enable a local attacker to ...

CVE-2020-1324

CVE-2020-1324 is an elevation of privilege vulnerability in Windows Security Health Service that occurs when handling certain objects in memory. Per the NVD/Microsoft references, exploitation requires a logged-on attacker and could allow privilege elevation within the same user context due to in-...

CVE-2020-1352

CVE-2020-1352 is tied to a memory handling issue in Windows USO Core Worker that enables elevation of privilege when a specially crafted application runs on Windows/Windows Server. The CNVD entry describes the vulnerability as an OS component memory-management flaw in Windows USO Core Worker that...

CVE-2020-1389

Technical details about CVE-2020-1389 are not provided in the connected documents. The materials only reiterate the vulnerability name and a generic Windows kernel information disclosure. Monitor official advisories for affected products, impact, and remediation updates.

CVE-2020-1427

CVE-2020-1427 is an elevation of privilege in the Windows Network Connections Service, caused by how the service handles objects in memory. Affected product: Windows Network Connections Service (Windows). Vulnerable component: memory handling within the service, leading to code execution with ele...

CVE-2020-16976

CVE-2020-16976 affects Windows systems via the Windows Backup Service. The root cause is an improper handling of file operations in the service, enabling a local attacker who already has code execution to run a crafted application to gain elevated privileges. The CVSS 3.1 base score is 7.8 (HIGH)...

CVE-2020-17031

Technical details about CVE-2020-17031 (Windows remote access elevation of privilege) are not provided in the connected documents; public information in the initial description is limited. Monitor for updates.

CVE-2021-1691

CVE-2021-1691 is described in the primary CVE record as a Windows Hyper-V Denial of Service vulnerability with a CVSS v3.1 base score of 7.7 (HIGH) and network attack vector; no exploitation status is provided in the documents. A connected Kaspersky entry (KLA12045) lists this CVE among multiple ...

CVE-2021-24106

CVE-2021-24106 is a Windows DirectX information disclosure vulnerability. According to the NVD entry, the issue has a CVSS v3.1 base score of 5.5 (medium) with a local attack vector, low attack complexity, and no user interaction required. The confidentiality impact is listed as HIGH, while integ...

CVE-2021-24107

Technical details for CVE-2021-24107 are not publicly provided in the connected documents; sources mention the vulnerability name in update KBs but do not specify affected products, root cause, or fixes.

CVE-2021-26878

CVE-2021-26878 refers to a Windows Print Spooler elevation of privilege vulnerability. The connected documents confirm the affected component is the Windows Print Spooler service and that the vulnerability is locally exploitable with low attack complexity, with high impact on confidentiality, int...

CVE-2024-35270

Technical details about CVE-2024-35270 (Windows iSCSI Service DoS) are not provided in the connected documents. Monitor for official advisories and Microsoft updates for affected products and remediation.

CVE-2024-38052

Technical details for CVE-2024-38052 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are specified here. Monitor official sources for updates.

CVE-2024-38091

Technical details for CVE-2024-38091 are not provided in the connected documents. Monitor for updates; no affected products, root cause, vectors, or fixes are stated here.

CVE-2024-38238

CVE-2024-38238 is listed in the Windows Streaming Service category as a local elevation-of-privileges vulnerability affecting the Windows kernel streaming service. The connected documents corroborate an elevated-privilege risk for this CVE within Windows components, without providing full exploit...

CVE-2024-49121

CVE-2024-49121 is an LDAP Denial-of-Service vulnerability in Windows LDAP (Domain Controller). The connected advisory confirms the LDAP issue as a DoS risk and notes that Microsoft has released fixes via updates; applying the relevant Windows security updates is the recommended remediation. MITRE...

CVE-2025-21238

CVE-2025-21238 affects the Windows Telephony Service and is a remote code execution vulnerability. The initial data lists CVSS 3.1 with NETWORK attack vector, LOW attack complexity, no privileges required, and user interaction required; impact is high on confidentiality, integrity, and availabili...

CVE-2025-21243

CVE-2025-21243 affects Windows Telephony Service. The vulnerability is a remote code execution flaw caused by input validation in Windows Telephony Server, enabling network-based exploitation with required user interaction and no privileges. The CVSS v3.1 base score is 8.8 (HIGH) with network acc...

CVE-2025-21246

CVE-2025-21246 is a Windows Telephony Service remote code execution vulnerability with a CVSS v3.1 base score of 8.8 (HIGH) and network attack vector. The provided connected documents confirm this CVE and indicate Microsoft has released updates to address it (e.g., KB5050009 and related January 2...

CVE-2025-21256

Technical details for CVE-2025-21256 are not provided in the connected documents. Public information here is limited to general Windows updates references; no product, exploit, or root-cause specifics are disclosed. Monitor for updates and additional disclosures.

CVE-2025-30388

Technical details about CVE-2025-30388 are not provided in the connected documents. Public information remains limited to the initial description. Monitor for updates from official advisories for affected products, impacts, and remediation.

CVE-2025-49740

CVE-2025-49740 is a protection mechanism failure in Windows Defender SmartScreen that can allow an unauthenticated attacker to bypass the SmartScreen protection over the network. This vulnerability affects the SmartScreen security feature in Windows and can lead to executing or delivering untrust...

CVE-2026-42909

CVE-2026-42909 involves a heap-based buffer overflow in the Remote Desktop Client that enables a remote attacker to execute code over the network. The vulnerability arises from improper handling of data during remote desktop operations, leading to memory corruption. The CVSS-3.1 vector (AV:N/AC:H...

CVE-2026-50369

CVE-2026-50369 is a Windows Remote Desktop Services vulnerability identified as a use-after-free that enables an authorized attacker to elevate privileges over the network. The initial entry and multiple connected sources describe the issue consistently and confirm the affected component as Windo...

CVE-2016-7223

CVE-2016-7223 describes a Local Privilege Escalation in the Microsoft Virtual Hard Disk (VHD) Driver affecting Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 (variants 1511, 1607), and Windows Server 2016. The root cause is improper access restriction to VHD-related files, allowi...

CVE-2017-0178

CVE-2017-0178 affects Microsoft Hyper-V on Windows 10 (incl. 1511/1607), Windows 8.1, Windows Server 2012 R2, and Windows Server 2016. The vulnerability is a denial-of-service caused by improper validation of input from a privileged user on a guest OS, leading to host crash. Connected docs corrob...

CVE-2017-11816

CVE-2017-11816 is an information disclosure flaw in the Microsoft Windows GDI component. The connected advisory notes a WMF-file processing out-of-bounds read as the root cause, enabling a remote attacker to cause information leakage by convincing a user to open a specially crafted web page or do...